CVE-2026-20347

The CVE concerns ClamAV’s Mach-O file format parser. The vulnerability arises from improper boundary checks during Mach-O content scanning, causing memory corruption that can lead to an out-of-bounds buffer read. An unauthenticated, remote attacker could submit a crafted Mach-O file to a affected...